$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer File: aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer (raw, json) Hash identifier: m57PvGJF7PKUq+cGIqQ+d2JIRwHA51pGxGfQtfdnTog= Subject key identifier: 68:32:76:F0:D8:C1:36:6A:7B:0A:9C:B1:61:B9:0F:31:A7:FF:8D:69 Authority key identifier: D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E Certificate issuer: /CN=A91A73810000/serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Tue 15 Sep 2026 01:40:48 +0000 Certificate not after: Wed 15 Sep 2027 01:30:02 +0000 Subordinate resources: IP: 151.158.222.0/23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=D1957EC58C08F35BAA6BFE77E45A9740BA471F9E Validity Not Before: Sep 15 01:40:48 2026 GMT Not After : Sep 15 01:30:02 2027 GMT Subject: CN=683276F0D8C1366A7B0A9CB161B90F31A7FF8D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:41:a0:1a:44:74:68:7f:d6:46:46:03:63: 71:39:30:fc:38:82:93:59:6d:f8:61:29:df:3e:14: 77:89:5a:d9:c5:bf:fc:84:82:3f:b0:e2:77:d0:27: 47:f8:df:78:9b:75:e8:ab:6e:1c:42:e6:54:d8:0a: f0:e5:9f:b5:c7:ec:96:3e:12:e1:8d:2e:6d:8e:96: b5:2c:07:63:a7:92:66:86:2e:f8:2a:b3:e2:ea:1e: b2:ae:3a:d8:97:45:e9:44:09:d5:53:6e:da:d7:89: f8:48:ef:b6:ea:95:de:3d:39:7f:26:74:51:ef:f1: f2:d7:10:49:38:8d:05:d7:03:49:7e:d0:f0:a3:07: d7:71:44:31:6e:cb:63:d0:b0:25:31:53:0c:1c:f7: e1:08:41:9c:fc:37:44:bf:5d:86:ff:c0:06:79:0e: e3:d5:78:0c:b1:21:35:03:de:f4:2b:40:b0:52:c6: f0:b6:5f:14:d3:47:41:2e:1e:b7:80:ea:d3:11:cc: 3a:67:55:72:6b:bc:d5:a2:16:13:d5:30:f9:26:43: e8:25:ec:fe:9f:ef:ee:5f:cc:db:d8:3f:cd:6b:b9: d0:6a:8f:cf:98:f5:e9:53:80:ca:32:83:bb:a8:2e: 24:4b:97:69:90:50:59:d2:f3:50:f1:58:3a:d9:0f: 3e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:76:F0:D8:C1:36:6A:7B:0A:9C:B1:61:B9:0F:31:A7:FF:8D:69 X509v3 Authority Key Identifier: keyid:D1:95:7E:C5:8C:08:F3:5B:AA:6B:FE:77:E4:5A:97:40:BA:47:1F:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.158.222.0/23 Signature Algorithm: sha256WithRSAEncryption 60:1d:e4:6b:27:1e:20:45:0f:8c:cf:87:fe:f4:ac:d1:a5:00: 81:68:2c:47:6e:7a:1a:cd:ef:1a:39:c8:92:29:9e:ec:f1:c3: 02:dc:87:f7:8e:f7:53:ad:7d:a8:94:f0:ce:a8:bf:8e:66:2c: a5:6d:36:da:77:9a:d8:ae:b9:70:63:1c:f2:10:45:c1:84:7f: 85:a7:38:d9:be:51:1c:15:c5:c0:f9:f4:8b:f2:a2:54:10:63: 48:4d:b7:4f:d4:77:d7:d1:a9:ce:a6:f7:7c:e3:cf:1c:d0:c2: bc:85:fb:9f:60:18:f7:4b:3a:99:3f:08:aa:5e:4e:e8:62:dd: c0:4f:4c:de:ac:d9:53:78:ea:14:41:20:3e:8d:46:ef:a7:df: 6b:a1:ef:a8:51:02:a7:c4:84:13:c7:8a:a3:1e:9e:0f:48:b6: d1:a8:0f:44:a3:38:c0:43:5b:bb:2b:b1:14:7e:d7:fa:c8:ef: 5f:36:60:28:6a:34:46:0a:c6:b4:ba:50:b2:87:65:d2:96:68: 12:d1:90:82:be:70:f4:2f:ad:15:13:4a:41:12:19:3c:a7:48: 3b:d6:e2:aa:a1:56:37:22:c2:03:af:26:17:d7:25:7d:01:ec: 74:22:79:8a:ad:68:67:36:5f:9e:ae:1a:03:3a:86:77:a8:43: 64:89:12:51 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhEMTk1N0VDNThDMDhGMzVCQUE2QkZFNzdFNDVB OTc0MEJBNDcxRjlFMB4XDTI2MDkxNTAxNDA0OFoXDTI3MDkxNTAxMzAwMlowMzEx MC8GA1UEAxMoNjgzMjc2RjBEOEMxMzY2QTdCMEE5Q0IxNjFCOTBGMzFBN0ZGOEQ2 OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSkQaAaRHRof9ZGRgNj cTkw/DiCk1lt+GEp3z4Ud4la2cW//ISCP7Did9AnR/jfeJt16KtuHELmVNgK8OWf tcfslj4S4Y0ubY6WtSwHY6eSZoYu+Cqz4uoesq462JdF6UQJ1VNu2teJ+EjvtuqV 3j05fyZ0Ue/x8tcQSTiNBdcDSX7Q8KMH13FEMW7LY9CwJTFTDBz34QhBnPw3RL9d hv/ABnkO49V4DLEhNQPe9CtAsFLG8LZfFNNHQS4et4Dq0xHMOmdVcmu81aIWE9Uw +SZD6CXs/p/v7l/M29g/zWu50GqPz5j16VOAyjKDu6guJEuXaZBQWdLzUPFYOtkP PhMCAwEAAaOCAoswggKHMB0GA1UdDgQWBBRoMnbw2ME2ansKnLFhuQ8xp/+NaTAf BgNVHSMEGDAWgBTRlX7FjAjzW6pr/nfkWpdAukcfnjAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFpWLXhZd0k4MXVxYV81MzVG cVhRTHBISDU0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIyQTVGNDFENjYxMUUyQTNG MjdGN0M3MkZEMUZGMi8wWlYteFl3STgxdXFhXzUzNUZxWFFMcEhINTQuY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMjAyODYvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzIwMjg2L2FE SjI4TmpCTm1wN0NweXhZYmtQTWFmX2pXay5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGXnt4wDQYJKoZIhvcN AQELBQADggEBAGAd5GsnHiBFD4zPh/70rNGlAIFoLEduehrN7xo5yJIpnuzxwwLc h/eO91OtfaiU8M6ov45mLKVtNtp3mtiuuXBjHPIQRcGEf4WnONm+URwVxcD59Ivy olQQY0hNt0/Ud9fRqc6m93zjzxzQwryF+59gGPdLOpk/CKpeTuhi3cBPTN6s2VN4 6hRBID6NRu+n32uh76hRAqfEhBPHiqMeng9IttGoD0SjOMBDW7srsRR+1/rI7182 YChqNEYKxrS6ULKHZdKWaBLRkIK+cPQvrRUTSkESGTynSDvW4qqhVjciwgOvJhfX JX0B7HQieYqtaGc2X56uGgM6hneoQ2SJElE= -----END CERTIFICATE-----Generated at Tue Sep 22 14:27:45 2026 by rpki-client